CVE-2026-2467
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A heap-based buffer overflow vulnerability in RTI Connext Professional Core Libraries allows overflow of variables and tags. This issue affects multiple versions of the product.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service, compromising data integrity and availability.
Recommendation
Immediately update RTI Connext Professional to version 7.7.0 or later, or to the appropriate patched versions for older branches as specified in the advisory.
Other vulnerabilities in RTI Connext Professional
See all- CVE-2026-3894Critical
An out-of-bounds read vulnerability in RTI Connext Professional Core Libraries allows buffer overread. This affects versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, and from 5.0.0 before 5.2.*.
- CVE-2026-7300Medium
A classic buffer overflow vulnerability has been found in RTI Connext Professional (Web Integration Service) due to copying data without checking input size. An attacker can exploit this flaw to cause filter failure, potentially leading to uncontrolled system behavior.
- CVE-2026-30799High
Missing authentication for a critical function in RTI Connext Professional (Security Plugins) allows identity spoofing. The vulnerability affects versions from 5.3.0 to 7.4.0 before 7.7.0.
- CVE-2026-2675Medium
Missing authentication for a critical function in RTI Connext Professional (Security Plugins) allows spoofing the source of data. The vulnerability affects versions from 5.3.0 up to 7.7.0 (excluding patched releases).
- CVE-2026-2674High
An out-of-bounds write vulnerability has been discovered in RTI Connext Professional, affecting Queueing Service, Core Libraries, and Persistence Service. This issue can lead to buffer overflows in versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, and from 6.1.0 before 6.1.*.
Original NVD description (English source)
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 5.0.0 before 5.2.*.